5 Legal Elements Every Business Website Should Have

A business website can look polished and still create legal risk in a few clicks. Founders often launch with copied terms, no privacy wording, or product claims that sound great in marketing but do not line up with New Zealand consumer law. Others collect customer details through contact forms, newsletter sign-ups or online checkout pages without clearly explaining what happens to that information.

Those mistakes can cause real problems. A customer dispute may turn on what your website said. A missing refund or delivery policy can lead to complaints. Weak privacy wording can put you on the back foot if someone asks how you use their data.

This guide answers a practical question, what are the 5 elements every business website should have from a legal point of view? If you are launching online in New Zealand, updating your ecommerce store, or reviewing a service-based website before you spend money on setup, here is what to sort out first.

Overview

The legal basics of a business website are usually not complicated, but they do need to match how your business actually operates. The right website terms can help set expectations, support compliance with New Zealand law, and reduce avoidable disputes before you take orders or collect personal information.

• Clear website terms and conditions
• A privacy policy that reflects your actual data practices
• Accurate business and contact information
• Compliant ecommerce terms, including payment, delivery and refunds
• Lawful marketing content, including truthful claims and proper rights to use content

These five areas matter whether you are trying to start a business in New Zealand, selling online for the first time, or refreshing an established website after your business structure, products or services have changed.

What 5 Elements Every Business Website Should Have Means For New Zealand Businesses

For a New Zealand business, these five website elements are the legal foundation of your online presence. They help you explain the deal you are offering, meet privacy expectations, and avoid statements that could breach consumer protection rules.

1. Website terms and conditions

Your website terms set the ground rules for people using your site. They are different from internal business policies and they are not just filler text for the footer.

For many businesses, website terms should cover:

• who operates the website
• what users can and cannot do on the site
• how website content can be used
• disclaimers about information on the site
• limits around service availability, outages and errors
• how disputes or issues may be handled

If you sell services, your website terms can also help distinguish between general website information and a formal contract. This matters where a customer reads a page, assumes a result is guaranteed, and later says that statement formed part of the deal.

Founders often copy terms from overseas websites or from businesses in a completely different industry. That is where problems start. A software business, a tradie, an online retailer and a consultancy will not all need the same wording. Your terms should fit your products, business structure and risk profile.

2. A privacy policy

If your website collects personal information, a privacy policy is usually essential. In practice, that includes most business websites.

You may collect personal information when someone:

• fills out a contact form
• signs up to a mailing list
• creates an account
• places an order
• requests a quote
• applies for a job
• uses analytics or tracking tools that identify them

Under New Zealand privacy law, transparency matters. People should be told what information you collect, why you collect it, how you store it, who you share it with, and how they can ask to access or correct their information.

This is where founders often get caught. They install ecommerce apps, payment tools, chat plugins or booking software that pass customer data to third parties, but their privacy policy still says almost nothing. If your site uses overseas software providers, cloud platforms or email marketing tools, your privacy wording should reflect that reality.

A privacy policy is not only for ecommerce businesses. Service businesses, agencies, SaaS providers, healthcare-adjacent businesses, recruitment platforms and professional firms can all hold personal information through a simple enquiry form.

3. Clear business identification and contact details

Your website should make it clear who the customer is dealing with. That sounds basic, but it is frequently overlooked.

At a minimum, many businesses should clearly display:

• the legal business name
• whether they operate as a company, sole trader or partnership
• relevant contact details
• where customers can send enquiries or complaints
• any trading name used publicly, if different from the legal entity name

This helps with trust and reduces confusion about who is actually providing the goods or services. It can also matter when you are using a brand name that is not the same as the company name registered with the Companies Office.

If you are trying to start a business in New Zealand and are still choosing a name, this is also a good moment to check whether your business name, domain branding and trade mark plans line up. A website launch is often when brand conflicts first become visible.

4. Ecommerce terms for sales, delivery, returns and payment

If you are selling online, your site should not stop at general website terms. You also need customer terms that govern the transaction itself.

Depending on your model, your website sales terms may need to cover:

• pricing and when payment is taken
• shipping areas and delivery timeframes
• risk and title for goods
• refunds, exchanges and cancellations
• subscription renewals or recurring payments
• what happens if stock is unavailable
• when an order is accepted
• consumer guarantees and any limits that lawfully apply in business-to-business sales

New Zealand consumer law matters here. The Fair Trading Act affects how you present products and offers, and the Consumer Guarantees Act can apply to goods and services supplied to consumers. Your terms cannot simply say there are no refunds in all circumstances if the law gives customers rights.

Businesses that sell to other businesses may be able to contract out of certain Consumer Guarantees Act obligations in some situations, but that needs proper wording and the arrangement has to meet legal requirements. A generic website banner will not do that job well.

5. Lawful content, claims and permissions

Everything on your website is a legal statement as well as a marketing statement. Product descriptions, before-and-after photos, testimonials, discount claims and comparison statements can all create risk if they are inaccurate or misleading.

Your website content should be checked for:

• claims that could mislead customers about price, performance or availability
• comparative advertising that cannot be backed up
• testimonials that are edited in a misleading way
• statements about outcomes that sound like guarantees
• images, videos, logos or music used without permission
• brand names or slogans that may infringe another party's trade mark

This element often gets ignored because it feels more like branding than legal work. In reality, copied images, unsupported claims and careless references to competitors are common website risks, especially for startups moving quickly.

When This Issue Comes Up

These legal website issues usually appear at predictable business moments. The best time to deal with them is before the site goes live, but many businesses only review them after something has gone wrong.

Launching a new business or side venture

If you are working out how to start a business in New Zealand, your website is often one of the first public-facing assets you create. Founders spend time on design, branding and ecommerce tools, but skip the legal pages because they feel less urgent.

That can be costly. Before you spend money on setup, your website wording should match your business structure, what you actually sell, and whether you need any industry-specific licence or registration arrangements outside the site itself.

Moving from offline to online sales

A shop, studio, consultancy or trade business that starts selling online often assumes existing customer practices will carry over. They usually do not.

Online selling creates new issues around order acceptance, digital payments, delivery delays, click-through acceptance, cancellation processes and privacy disclosures. If your business previously relied on verbal explanations in store or by phone, your website now needs to carry more of that legal workload.

Using lead generation, bookings or customer accounts

You do not need a full online store to need proper website terms. A service website that captures leads, offers online bookings or stores customer account information still raises privacy, contract and marketing issues.

For example, a web development studio taking project enquiries, a fitness business using booking software, or a SaaS startup offering free trials all collect data and make representations that may later matter in a dispute.

Refreshing branding or expanding into new markets

A website review is also worth doing when your business changes direction. You may have new products, new payment methods, different delivery arrangements, or a fresh brand identity.

This is also the point to review whether your trade mark position is still sensible, whether your terms mention outdated services, and whether your privacy policy still reflects the apps and tools now connected to your site.

After a complaint, chargeback or data question

Many businesses only discover gaps after a customer asks for a refund, disputes a subscription renewal, or requests access to personal information. At that point, weak website wording can make a small issue harder to resolve.

If your site does not clearly explain your process, the customer may rely on screenshots, emails or broad expectations instead. That makes disputes more fact-specific and more expensive to manage.

Practical Steps And Common Mistakes

The practical answer is to treat your website like part of your legal documents, not just part of your marketing. A short review before launch can prevent a lot of avoidable clean-up later.

Match each page to a legal function

Start by mapping what your website actually does. A brochure site, an ecommerce store and a subscription platform need different legal wording.

Check whether your site:

• collects personal information
• takes payments
• offers downloadable content
• uses customer testimonials
• promises delivery times or outcomes
• allows users to create accounts
• includes bookings or recurring services

Once you know the functions, it is easier to see what terms and disclosures are needed.

Write terms for your real customer journey

Your website terms should reflect how a customer moves from browsing to buying or enquiring. That means checking the wording at each practical step, not just drafting a general legal page.

For an ecommerce store, think about:

• when the customer sees the price
• when they agree to your terms
• when the order is confirmed
• how shipping estimates are described
• what happens if you cannot fulfil an order
• how refunds or exchanges are requested

For a service business, think about where website information ends and a signed proposal, scope or service agreement begins. This is especially important before you sign a contract with a new client who may have relied on broad claims on your website.

Check your privacy policy against your tech stack

A common mistake is writing a simple privacy policy once and never revisiting it. Your actual data handling usually changes as the business grows.

Review all the tools connected to your website, such as:

• payment processors
• email marketing platforms
• CRM systems
• booking software
• live chat tools
• analytics and ad tracking tools
• cloud hosting providers

If those tools collect, store or transfer personal information, your privacy wording should line up with that. You should also have internal practices that match the policy, because a privacy policy is not just a public promise, it is something your business should be able to follow.

Avoid overpromising in sales copy

Marketing teams and founders naturally want the website to sound persuasive. The legal issue starts when persuasive language becomes a promise you may not be able to keep.

Watch for wording like:

• guaranteed results
• best in New Zealand, if you cannot substantiate it
• limited time offers that are constantly repeated
• delivery claims that depend on third parties
• absolute security statements about data protection

The main risk is not only regulator attention. It is also customer complaints, refund demands and damaged credibility when the site says more than the business can actually deliver.

Use content you actually own or have permission to use

It is easy to assume online images, graphics or testimonials are fair game if they are easy to download or repost. They are not.

Before launch, confirm you have rights for:

• photographs and graphics
• logo files and brand assets
• customer reviews or case studies
• video, music and animations
• software, themes or plugin content that have licensing conditions

If you are building brand value, it also makes sense to think about trade mark protection for your business name, logo or key brand elements. Registration is not part of the website itself, but website launch is often when brand use becomes public and commercially significant.

Common mistakes founders make

Most website legal problems come from a small number of repeated errors.

• Copying overseas terms that do not fit New Zealand law
• Using the same terms for a service site and an online store
• Publishing a privacy policy that does not reflect real data handling
• Hiding refund or subscription terms until after payment
• Making broad claims that sales staff cannot support
• Using a trading name without checking brand conflicts
• Forgetting to update website wording when the business changes

If your site supports a regulated industry, there may also be sector-specific legal requirements, registration issues or licence-style obligations that should be reflected in your website content. Those requirements depend on the type of business, so they should be checked case by case.

FAQs

Do all New Zealand business websites need terms and conditions?

Most should have them. The exact wording depends on whether your site is informational, lead-generating, subscription-based or selling online, but clear terms are useful for setting expectations and reducing disputes.

Do I need a privacy policy if I only have a contact form?

Usually, yes. A contact form commonly collects personal information such as names, email addresses and phone numbers, so your site should explain what you collect and how you use it.

Can I copy website terms or a privacy policy from another business?

No, that is risky. The wording may not suit your business model, may not reflect New Zealand law, and may not match how your website actually works.

What if I sell both to consumers and other businesses?

Your terms should deal with that clearly. Consumer sales and business-to-business sales can involve different legal rules, especially around guarantees and limits of liability.

Is a trade mark part of the five website elements?

Not as a website page, but it is closely connected. If your website launches a brand publicly, it is a good time to check whether your business name, logo and key branding should be protected and whether they risk conflicting with existing rights.

Key Takeaways

• The 5 elements every business website should have are clear website terms, a privacy policy, accurate business identification, proper sales terms for ecommerce, and lawful website content.
• These elements matter for startups, SMEs and established businesses alike, especially before you launch online, take orders, collect customer data or sign new clients.
• Your website wording should reflect New Zealand legal context, including privacy obligations, consumer protection rules, contracts and truthful marketing.
• Generic or copied website documents often create more risk than they solve because they do not match your actual customer journey or business operations.
• A website review is worth doing when you change your products, pricing, brand, software tools, delivery model or business structure.

If your business is dealing with 5 elements every business website should have and wants help with website terms, privacy policies, ecommerce terms, trade mark issues, you can reach us on 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.